Microsoft Entra ID

Groups Dynamic Rule Member Of

10 November 2026Doc update+1 / −1 lines

In brief

The documentation now states that membership does not automatically update when a child group is deleted; affected users or devices remain members until the rule is modified. The reference to members removed from a child group was removed.

What Entra admins need to know

Administrators should use the revised limitation when troubleshooting memberOf dynamic group membership.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

The dynamic group rule builder and validate feature can't be used for memberOf at this time.
The memberOf attribute can't be used with other operators. For example, you can't create a rule that states "Members Of group A can't be in Dynamic group B."
Users included in memberOf dynamic membership groups might cause a slower processing time for your tenant, if the tenant has a large number of groups or frequent dynamic membership groups updates.
Membership of a memberOf dynamic group doesn't automatically update when a child group is ~~deleted or when members are removed from a child group.~~deleted. The affected users or devices remain members of the memberOf dynamic group until the rule is modified.
Only available in public cloud.

@@ -42,7 +42,7 @@ You must be at least a [User Administrator](/entra/identity/role-based-access-co - The dynamic group rule builder and validate feature can't be used for `memberOf` at this time. - The `memberOf` attribute can't be used with other operators. For example, you can't create a rule that states "Members Of group A can't be in Dynamic group B." - Users included in `memberOf` dynamic membership groups might cause a slower processing time for your tenant, if the tenant has a large number of groups or frequent dynamic membership groups updates.-- Membership of a memberOf dynamic group doesn't automatically update when a child group is deleted or when members are removed from a child group. The affected users or devices remain members of the memberOf dynamic group until the rule is modified.+- Membership of a memberOf dynamic group doesn't automatically update when a child group is deleted. The affected users or devices remain members of the memberOf dynamic group until the rule is modified.   - Only available in public cloud.